Add a new disable_insecure_quic finch parameter to disable insecure QUIC.

net/http/http_stream_factory_impl.cc

Index: net/http/http_stream_factory_impl.cc
diff --git a/net/http/http_stream_factory_impl.cc b/net/http/http_stream_factory_impl.cc
index 1867d6d38b341491923307d9afa62ab95faef108..2d8c6849cefc0b027bc3306b6774224c17b83b2a 100644
--- a/net/http/http_stream_factory_impl.cc
+++ b/net/http/http_stream_factory_impl.cc
@@ -197,12 +197,18 @@ AlternativeService HttpStreamFactoryImpl::GetAlternativeServiceFor(
   // QUIC, then remove the following two lines.
   if (alternative_service.host != origin.host())
     return kNoAlternativeService;
+
   if (!session_->params().enable_quic)
     return kNoAlternativeService;
 
   if (session_->quic_stream_factory()->IsQuicDisabled(origin.port()))
     return kNoAlternativeService;
 
+  if (session_->params().disable_insecure_quic &&
+      !original_url.SchemeIs("https")) {
+    return kNoAlternativeService;
+  }
+
   return alternative_service;
 }